MFA FOR YOUR VPNThree Keys to Getting It Right

RSA EBOOK: MFA FOR YOUR VPN: THREE KEYS TO GETTING IT RIGHT | 2

YOUR VPN DESERVES MORE THAN A USERNAME AND PASSWORDBack in the day, only a handful of users needed remote access via a virtual private network (VPN). And only the most critical of those were provided with enhanced security, via some form of token. Today, not only employees but also contractors, vendors, audit team members, partners, and sometimes even customers need access to your VPN. But far too many organizations still rely on usernames and passwords alone—leaving themselves them far too vulnerable.

In today’s modern VPN era, you need to offer easy, frictionless and secure access to a diverse and growing population of users. You must be sure that they are who they say they are, and offer the appropriate levels of access to each one, every time.

Mobile multi-factor authentication (MFA) from RSA SecurID® Access can prevent unauthorized access to your VPN—and make it easy and cost-efficient for legitimate users to authenticate.

.

HOW EASILY CAN YOU DISTINGUISH LEGITIMATE USERS FROM MALICIOUS ACTORS?

RSA EBOOK: MFA FOR YOUR VPN: THREE KEYS TO GETTING IT RIGHT | 3

THREE KEYS TO USING MFA TO SECURE YOUR VPN ACCESS

POWER ACCURATE STEP- UP AUTHENTICATION WITH RISK ANALYTICS

Look for a MFA solution that can discern when access risk is high and when it’s not—and respond accordingly. User-behavior analytics, relevant threat intelligence and machine learning make it possible to step up authentication when access risk warrants it, rather than inconveniencing low-risk users with unnecessary requests for additional authentication. A robust policy engine can put flexible controls in the hands of your security teams.

OFFER EACH USER THE MOST CONVENIENT AUTHENTICATION OPTION

Employees, contractors and partners. At the office, at home, in coffee shops, on airplanes. They all need easy, secure VPN access—but not all the same way. To give users convenient VPN access without compromising security, your MFA solution needs to offer a range of sign-in options, including mobile push-to-approve, one-time passcodes, biometrics, and hardware and software tokens.

KEEP IT SIMPLE FOR BOTH USERS AND ADMINS

Spare yourself the grief of multiple MFA solutions. A MFA solution that can extend beyond VPN to other access scenarios—such as third-party cloud applications—gives users a single, seamless access experience, and you one secure solution to manage.

321

RSA EBOOK: MFA FOR YOUR VPN: THREE KEYS TO GETTING IT RIGHT | 4

MORE THAN TOKENS

RSA PROVIDES A HOST OF SOPHISTICATED AUTHENTICATION OPTIONS TO SECURE YOUR VPN

RSA SecurID Access provides the widest range of authenticators, letting you extend modern MFA to more VPN users—and allowing them to choose from push notification, biometrics, hardware and software tokens, and more. RSA SecurID Access makes it easy to manage different authenticators for different users, and to balance security, convenience and cost.

PUSH MOBILE OTP TEXT MESSAGE VOICE CALL

HARDWARE TOKEN

SOFTWARE TOKEN

WEARABLES

BIOMETRICS

FIDO

RSA EBOOK: MFA FOR YOUR VPN: THREE KEYS TO GETTING IT RIGHT | 5

HOW IT WORKS

RSA SECURID ACCESS

RSA SecurID Access enables businesses to empower employees, partners and contractors to do more, without compromising security or convenience. Embracing the security challenges of today’s blended-cloud and on-premises environments, bring-your-own-device trends and mobile policies, RSA SecurID Access ensures that users are who they say they are—and that they get timely, convenient access to the applications they need, from any device, anywhere.

33

User

1User needs to access apps and data on the

network via VPN

2Identity authenticated with

a simple mobile pushIdentity assurance requested

from RSA

3Access granted

VPN

VPN

VPN

RSA SecurID makes it easy to use mobile authentication to protect access to your VPN and support digital business.

RSA and the RSA logo are registered trademarks or trademarks of Dell Technologies in the United States and other countries. © Copyright 2018 Dell Technologies. All rights reserved. Published in the USA. 08/18 H17406.

Dell Inc. or its subsidiaries believe the information in this document is accurate as of its publication date. The information is subject to change without notice.

ABOUT RSA

RSA offers business-driven security solutions that uniquely link business context with security incidents to help organizations manage risk and protect what matters most. RSA solutions are designed to effectively detect and respond to advanced attacks; manage user identities and access; and reduce business risk, fraud and cybercrime. RSA protects millions of users around the world and helps more than 90% of Fortune 500 companies thrive in an uncertain, high-risk world. For more information, go to rsa.com.